Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          rkwm9XUEZZzFXYLdK/H2oY3Tji8up2c299mwkbHrBl8=
Subject key identifier:   C2:BE:0A:95:30:3A:6C:60:6B:E5:B7:B4:44:E0:C9:7B:78:87:77:D2
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       019EB76A0A20911765593EF268652ACCA8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          064B
Signing time:             Thu 11 Jun 2026 16:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:40 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: mpllmBHfp0suH3AtgbMH8H1iKgfJPgmgBX2zFd8ec4w=)
                          2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:0a:20:91:17:65:59:3e:f2:68:65:2a:cc:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Jun 11 16:00:40 2026 GMT
            Not After : Jun 12 16:00:40 2026 GMT
        Subject: CN=c2be0a95303a6c606be5b7b444e0c97b788777d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:54:a8:23:55:b1:6c:3d:96:6a:76:ca:e5:
                    8b:c4:30:c9:87:c1:b5:0f:8f:53:c5:30:70:f2:9f:
                    20:2a:ae:65:58:10:49:89:70:6c:d3:93:83:6e:4b:
                    40:30:60:6f:b3:bd:88:48:d8:f3:be:ea:ab:49:4a:
                    40:84:b9:bc:cf:47:74:57:50:18:06:68:52:79:9b:
                    e5:ef:e5:73:83:63:ee:d3:51:66:e5:cb:01:f1:c4:
                    a4:6a:70:06:d5:39:1e:62:c2:05:a2:10:a6:ac:68:
                    83:99:0f:28:42:30:35:d3:0e:cc:9a:8c:49:9c:3d:
                    cf:35:3c:fd:10:e0:1b:1e:3d:a4:07:c5:4e:8d:f3:
                    6a:eb:18:0d:7d:15:19:88:30:a2:eb:7f:fd:d2:d9:
                    a0:b6:b6:7a:43:8f:44:2b:11:05:29:a7:35:0c:5f:
                    24:d4:16:b7:80:e2:8d:e6:c6:fe:43:fa:18:ec:dd:
                    f1:d6:ad:0e:59:76:20:1a:e6:a6:bb:22:d1:87:cb:
                    bc:be:85:ff:0b:bc:82:4a:5d:2f:50:dc:ed:9b:3a:
                    54:5f:23:25:7e:03:1b:75:97:dc:8f:95:6d:22:46:
                    0e:e9:41:3c:6c:a9:95:9e:c3:81:11:26:7a:4e:37:
                    44:d7:c5:2f:22:bc:3d:76:dd:e9:05:60:a3:90:a4:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:0A:95:30:3A:6C:60:6B:E5:B7:B4:44:E0:C9:7B:78:87:77:D2
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:04:3d:da:4d:05:83:63:69:1a:de:a5:dd:67:3f:71:2c:c2:
         0f:50:0f:b9:1f:2f:a1:35:19:5f:fc:c2:4b:36:9a:92:de:ee:
         53:d8:0e:56:ce:32:22:95:5a:bf:fa:cd:c4:a4:aa:61:d3:01:
         6e:bd:2f:09:6e:29:92:8c:a3:22:e6:b5:08:d7:ee:6e:58:02:
         22:0f:ce:e2:bb:ad:d5:3f:cc:53:2a:7d:2a:01:00:b6:3b:ea:
         81:2d:98:8e:5a:74:da:3b:ad:f8:5c:6b:5c:03:f0:17:c7:56:
         46:ff:0e:dc:ad:f1:64:1e:58:f4:e1:c0:f1:d1:6a:a2:18:a9:
         24:b8:80:6e:00:03:08:89:ad:df:81:cd:30:93:03:a6:2c:ba:
         d8:e0:b7:f8:28:bb:7d:4f:b1:00:43:45:e5:ae:52:02:65:69:
         83:59:6c:4f:c7:7d:2a:4e:50:a2:11:34:5f:70:37:4e:56:ca:
         b2:9b:62:82:e6:d3:39:84:81:9a:1d:c3:71:2e:02:5a:3d:e7:
         05:c9:46:da:b8:59:a7:88:f9:fb:bb:30:35:6e:40:55:5b:1d:
         e5:dc:88:13:5c:26:3c:b8:ce:ce:4e:b3:ae:5f:d5:b2:a3:63:
         62:56:69:e9:22:e4:b8:6a:4b:0b:5c:69:59:e4:be:d8:f7:ef:
         e6:80:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:58:48 2026 by rpki-client